The Exploit Database - CXSecurity.com

MySchool 1.0 SQL Injection / Code Injection / XSS / CSRF

bRpsd — Sat, 01 Feb 2025 09:40:45 +0000

Topic: MySchool 1.0 SQL Injection / Code Injection / XSS / CSRF Risk: High Text:@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ .:. Exploit Title > MySchool System - Multiple Vulnerabil...

SOPlanning 1.52.01 Remote Code Execution

Ardayfio Samuel Nii Aryee — Thu, 02 Jan 2025 22:03:18 +0000

Topic: SOPlanning 1.52.01 Remote Code Execution Risk: Medium Text:# Exploit Title: SOPlanning 1.52.01 (Simple Online Planning Tool) - Remote Code Execution (RCE) (Authenticated) # Date: 6th Oc...

Laravel 11.0 Cross Site Scripting

E1.Coders — Wed, 18 Dec 2024 21:14:05 +0000

Topic: Laravel 11.0 Cross Site Scripting Risk: Medium Text:/*! - # VULNERABILITY: Cross Site Scripting Laravel version 11.0 - # Authenticated Persistent XSS - # GOOGLE DORK: inurl:....

Asterisk AMI Originate Authenticated Remote Code Execution

h00die — Tue, 03 Dec 2024 22:32:54 +0000

Topic: Asterisk AMI Originate Authenticated Remote Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

CUPS IPP Attributes LAN Remote Code Execution

Spencer McIntyre — Sat, 30 Nov 2024 22:27:13 +0000

Topic: CUPS IPP Attributes LAN Remote Code Execution Risk: High Text:class MetasploitModule < Msf::Exploit::Remote Rank = NormalRanking include Exploit::Remote::DNS::Common include Expl...

needrestart Local Privilege Escalation

Qualys Security Advisory — Thu, 28 Nov 2024 22:51:03 +0000

Topic: needrestart Local Privilege Escalation Risk: Medium Text:Qualys Security Advisory LPEs in needrestart (CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-...

Pyload Remote Code Execution

Spencer McIntyre — Mon, 18 Nov 2024 16:23:55 +0000

Topic: Pyload Remote Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

BYOB Unauthenticated Remote Code Execution

Valentin Lobstein — Wed, 16 Oct 2024 20:51:59 +0000

Topic: BYOB Unauthenticated Remote Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

WordPress LMS 4.2.7 SQL Injection

Avento — Sun, 13 Oct 2024 14:44:34 +0000

Topic: WordPress LMS 4.2.7 SQL Injection Risk: Medium Text:# CVE-2024-8522 LearnPress – WordPress LMS Plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_only_fields' ## Stac...

PHP-Nuke Top Module SQL Injection

Emiliano Febbi — Tue, 08 Oct 2024 20:23:24 +0000

Topic: PHP-Nuke Top Module SQL Injection Risk: Medium Text:# Exploit Title: PHP-Nuke ( SQL injection Top Module + protection Bypass ) # Google Dork: intext: Powered by PHP-Nuke # Date:...

Acronis Cyber Infrastructure Default Password Remote Code Execution

h00die-gr3y — Mon, 07 Oct 2024 21:22:35 +0000

Topic: Acronis Cyber Infrastructure Default Password Remote Code Execution Risk: Low Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

Microsoft Windows TOCTOU Local Privilege Escalation

jheysel-r7 — Wed, 18 Sep 2024 21:19:15 +0000

Topic: Microsoft Windows TOCTOU Local Privilege Escalation Risk: Medium Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

SPIP BigUp 4.3.1 / 4.2.15 / 4.1.17 Unauthenticated Remote Code Execution

Valentin Lobstein — Mon, 16 Sep 2024 22:03:54 +0000

Topic: SPIP BigUp 4.3.1 / 4.2.15 / 4.1.17 Unauthenticated Remote Code Execution Risk: Low Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

SerComm Network Device Backdoor Detection

Eloi Vanderbeken — Tue, 10 Sep 2024 19:51:13 +0000

Topic: SerComm Network Device Backdoor Detection Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

OKI Printer Default Login Credential Scanner

antr6X — Sun, 08 Sep 2024 18:52:51 +0000

Topic: OKI Printer Default Login Credential Scanner Risk: Low Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

VICIdial Multiple Authenticated SQL Injection

h00die — Tue, 03 Sep 2024 21:02:00 +0000

Topic: VICIdial Multiple Authenticated SQL Injection Risk: Medium Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

TVT NVMS-1000 Directory Traversal

Dhiraj Mishra — Tue, 03 Sep 2024 21:01:34 +0000

Topic: TVT NVMS-1000 Directory Traversal Risk: Medium Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

IntelliNet 2.0 Remote Root

Jean Pereira — Tue, 03 Sep 2024 21:01:21 +0000

Topic: IntelliNet 2.0 Remote Root Risk: High Text:#!/usr/local/bin/node const { execSync } = require('child_process'); const readline = require('readline'); let TARGET = ''...

Microsoft Exchange Privilege Escalation

_dirkjan — Tue, 03 Sep 2024 21:00:21 +0000

Topic: Microsoft Exchange Privilege Escalation Risk: Medium Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

Apache Karaf Default Credentials Command Execution

Nicholas Starke — Mon, 02 Sep 2024 20:57:51 +0000

Topic: Apache Karaf Default Credentials Command Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

A10 Networks AX Loadbalancer Directory Traversal

xistence — Sun, 01 Sep 2024 21:04:16 +0000

Topic: A10 Networks AX Loadbalancer Directory Traversal Risk: Medium Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

WordPress NextGEN Gallery Directory Read

Roberto S. Soares — Sun, 01 Sep 2024 21:04:04 +0000

Topic: WordPress NextGEN Gallery Directory Read Risk: Medium Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

SAP BusinessObjects Web User Bruteforcer

Jay Turla — Sun, 01 Sep 2024 21:03:39 +0000

Topic: SAP BusinessObjects Web User Bruteforcer Risk: Low Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

OpenMediaVault rpc.php Authenticated Cron Remote Code Execution

Brandon Perry — Thu, 08 Aug 2024 08:38:05 +0000

Topic: OpenMediaVault rpc.php Authenticated Cron Remote Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

WordPress PayPlus Payment Gateway SQL Injection

j3r1ch0123 — Thu, 08 Aug 2024 08:36:06 +0000

Topic: WordPress PayPlus Payment Gateway SQL Injection Risk: Medium Text:#!/usr/bin/env python3.11 import requests import time def exploit(url): payload = {"wc-api": "payplus_gateway&status_...

Devika v1 Path Traversal via snapshot_path

Alperen Ergel — Sun, 04 Aug 2024 21:12:49 +0000

Topic: Devika v1 Path Traversal via snapshot_path Risk: Medium Text:# Exploit Title: Devika v1 - Path Traversal via 'snapshot_path' Parameter # Google Dork: N/A # Date: 2024-06-29 # Exploit Au...

Softing Secure Integration Server 1.22 Remote Code Execution

mr_me — Mon, 22 Jul 2024 20:20:22 +0000

Topic: Softing Secure Integration Server 1.22 Remote Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

Ghostscript Command Execution / Format String

Thomas Rinsma — Mon, 22 Jul 2024 20:19:05 +0000

Topic: Ghostscript Command Execution / Format String Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

Adobe Commerce / Magento Open Source XML Injection / User Impersonation

RedWay Security — Mon, 22 Jul 2024 20:18:48 +0000

Topic: Adobe Commerce / Magento Open Source XML Injection / User Impersonation Risk: Medium Text:#!/usr/bin/env ruby -W0 require 'bundler' Bundler.require(:default) DEBUG = false USE_PROXY = false PROXY_ADDR = '127....

Atlassian Confluence Administrator Code Macro Remote Code Execution

W01fh4cker — Thu, 11 Jul 2024 20:31:30 +0000

Topic: Atlassian Confluence Administrator Code Macro Remote Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

Ivanti EPM RecordGoodApp SQL Injection / Remote Code Execution

Christophe de la Fuente — Tue, 09 Jul 2024 21:26:45 +0000

Topic: Ivanti EPM RecordGoodApp SQL Injection / Remote Code Execution Risk: Medium Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

Payroll Management System 1.0 Remote Code Execution

ShellUnease — Mon, 24 Jun 2024 19:41:25 +0000

Topic: Payroll Management System 1.0 Remote Code Execution Risk: High Text:# Exploit Title: Payroll Management System v1.0 RCE (Unauthenticated) # Google Dork: intitle:"Employee's Payroll Management Sy...

Apache OFBiz Forgot Password Directory Traversal

jheysel-r7 — Mon, 24 Jun 2024 19:41:08 +0000

Topic: Apache OFBiz Forgot Password Directory Traversal Risk: Medium Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

Netis MW5360 Remote Command Execution

h00die-gr3y — Mon, 24 Jun 2024 19:40:21 +0000

Topic: Netis MW5360 Remote Command Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

Rejetto HTTP File Server (HFS) Unauthenticated Remote Code Execution

sfewer-r7 — Mon, 17 Jun 2024 07:49:10 +0000

Topic: Rejetto HTTP File Server (HFS) Unauthenticated Remote Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

PHP Remote Code Execution

Yesith Alvarez — Sat, 15 Jun 2024 16:26:40 +0000

Topic: PHP Remote Code Execution Risk: High Text:# Exploit Title: PHP Windows Remote Code Execution (Unauthenticated) # Exploit Author: Yesith Alvarez # Vendor Homepage: http...

VSCode ipynb Remote Code Execution

h00die — Tue, 11 Jun 2024 21:36:10 +0000

Topic: VSCode ipynb Remote Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

Aquatronica Control System 5.1.6 Password Disclosure

LiquidWorm — Fri, 07 Jun 2024 21:47:49 +0000

Topic: Aquatronica Control System 5.1.6 Password Disclosure Risk: Medium Text:#!/usr/bin/env python # -*- coding: utf-8 -*- # # # Aquatronica Control System 5.1.6 Passwords Leak Vulnerability # # # ...

CHAOS 5.0.8 Cross Site Scripting / Remote Command Execution

h00die — Wed, 22 May 2024 21:20:46 +0000

Topic: CHAOS 5.0.8 Cross Site Scripting / Remote Command Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...

AVideo WWBNIndex Plugin Unauthenticated Remote Code Execution

Valentin Lobstein — Wed, 22 May 2024 21:18:47 +0000

Topic: AVideo WWBNIndex Plugin Unauthenticated Remote Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...